CVE-2023-31416 — Elastic Cloud on Kubernetes (ECK) secret token configuration issue
Secret token configuration is never applied when using ECK <2.8 with APM Server >=8.0. This could lead to anonymous requests to an APM Server being accepted and the data ingeste…
Published: 2023-10-26 · CVSS: 5.3 · CVSS 3.1
Secret token configuration is never applied when using ECK <2.8 with APM Server >=8.0. This could lead to anonymous requests to an APM Server being accepted and the data ingested into this APM deployment.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7